Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa
File: 3139332e3134322e3230302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: b+aqHC5URgtBSykdJ0kmDHGwQhcscW38KPTPnBflOCI=
Subject key identifier: C8:6B:80:7D:7A:FB:46:B8:92:7F:45:78:B4:F7:2A:4A:47:F4:04:5B
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 6D95862F927E8C504A61129DAF8DF83391E8D839
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:09 +0000
ROA not before: Mon 27 Mar 2023 08:23:09 +0000
ROA not after: Mon 25 Mar 2024 08:28:09 +0000
asID: 0
IP address blocks: 193.142.200.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:95:86:2f:92:7e:8c:50:4a:61:12:9d:af:8d:f8:33:91:e8:d8:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:09 2023 GMT
Not After : Mar 25 08:28:09 2024 GMT
Subject: CN=C86B807D7AFB46B8927F4578B4F72A4A47F4045B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:1b:b7:61:85:53:19:ef:f9:de:c9:26:f1:
ed:a3:af:70:d2:24:a9:8a:45:f0:72:e6:29:16:fc:
21:8a:a7:5e:7f:52:7f:86:eb:8d:78:84:af:9d:c3:
d9:ed:52:29:1e:8e:4d:06:7f:0b:12:4a:ad:8a:91:
d9:bc:d3:f3:c7:be:38:12:7e:51:92:5d:75:ca:39:
1d:5e:0f:40:21:60:a0:18:79:43:14:ab:24:90:a3:
22:f6:a1:bb:bb:e4:94:c3:62:a6:ef:74:eb:b7:93:
4d:32:97:e6:7d:d4:93:d1:d1:16:1e:45:5c:fd:a4:
14:b8:5f:2d:15:e8:7d:f5:be:31:ce:f5:f2:83:d5:
c1:ed:8c:b4:71:7e:11:ef:40:45:a9:ec:7f:bb:34:
a3:54:15:93:7b:36:8b:ab:94:9d:31:80:7c:98:60:
06:38:64:7f:c2:20:d4:cf:1c:7e:2c:b5:63:20:c5:
90:6c:2f:e6:66:61:81:02:e0:cf:81:65:09:de:fd:
b1:38:30:f3:8d:d5:5c:dc:91:18:44:fe:e7:6d:5e:
fb:02:7c:4b:89:17:11:4a:51:ac:bc:a0:fa:66:74:
76:4c:1a:c0:62:11:a0:7f:84:77:a5:bd:49:b9:26:
6a:0e:8d:83:55:60:1b:7b:00:9b:28:85:b5:62:0c:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6B:80:7D:7A:FB:46:B8:92:7F:45:78:B4:F7:2A:4A:47:F4:04:5B
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/3139332e3134322e3230302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.200.0/23
Signature Algorithm: sha256WithRSAEncryption
30:29:47:da:2e:ab:c7:17:58:a4:5c:ba:76:ed:a8:a3:be:06:
89:8f:0f:35:f2:34:80:19:9d:1e:85:fd:d2:6d:46:58:eb:e9:
d7:6f:c8:f8:ca:f9:56:df:1e:f7:f1:6d:78:f2:7e:e1:c4:2c:
2b:3e:14:fa:85:ea:8f:e9:5b:ff:05:50:e4:98:fb:5a:d7:cd:
34:ef:38:60:ed:eb:37:9a:8e:1a:85:52:86:06:b4:e1:c1:0f:
62:cb:6d:23:9b:c3:4f:9c:f1:c8:30:b3:31:29:3a:c9:0f:2d:
77:d5:6f:e5:d3:18:a7:c5:b1:3b:fc:67:fd:8d:96:d1:11:24:
49:d8:f6:26:65:6a:98:b8:68:ba:f8:96:e4:4c:5a:b7:1c:f7:
70:49:ff:8a:e1:04:20:27:a6:b5:66:94:09:11:fb:54:48:c0:
53:6c:b0:20:b1:b9:b9:2c:f7:28:a5:92:47:56:80:64:21:d6:
e7:42:70:c9:9e:88:f8:eb:7a:54:25:a1:bb:9e:26:bb:1e:a1:
28:60:cd:40:83:69:07:2e:0c:f1:4a:47:4a:3b:9e:9e:d6:53:
ee:c9:f7:08:c4:bd:df:51:d2:4c:39:d5:ba:3e:89:f4:98:01:
a7:d1:0d:0e:82:0c:0d:01:52:da:53:b7:2b:48:13:2a:93:e4:
40:bb:cd:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org